Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/05E5F3E03D6111F088F2BDEDDAE4EC9C.roa
File: 05E5F3E03D6111F088F2BDEDDAE4EC9C.roa (raw, json)
Hash identifier: 1/A+njlEGzI4D5ILbIiRPfU3QkauKV0MD4PDpI3kJwo=
Subject key identifier: D4:AE:E9:13:FF:C7:76:E3:12:A2:0F:0D:E4:31:68:B2:5E:5E:C3:27
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0AED
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/05E5F3E03D6111F088F2BDEDDAE4EC9C.roa
Signing time: Fri 30 May 2025 14:18:57 +0000
ROA not before: Fri 30 May 2025 14:18:53 +0000
ROA not after: Fri 29 May 2026 14:18:53 +0000
asID: 208485
IP address blocks: 196.251.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2797 (0xaed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: May 30 14:18:53 2025 GMT
Not After : May 29 14:18:53 2026 GMT
Subject: CN=6839be51-aec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:ba:71:bc:4c:59:dd:53:61:cf:0c:36:14:
2a:86:6b:1d:8a:03:89:87:b9:b7:ff:ee:f0:1f:40:
49:59:1a:ee:4b:95:3d:07:57:f0:79:91:aa:08:ad:
03:93:30:f6:85:85:71:b2:39:14:5d:90:d6:a4:c5:
aa:c4:62:0f:d0:88:84:16:19:e4:24:0b:12:ac:50:
c8:7d:f4:54:21:c0:26:3d:31:00:56:5d:fe:e0:8a:
46:eb:16:e0:20:54:c0:c2:6b:61:c5:7e:f2:eb:ba:
5e:5d:1e:bc:ec:cb:31:8a:fa:98:9e:14:5d:d2:be:
9d:de:56:2e:71:c3:cb:0c:65:b0:af:b8:01:f6:25:
fb:9f:88:40:d2:01:67:1d:eb:ea:b0:e6:a2:9f:e2:
c7:8d:5d:af:42:3b:a4:a3:06:cf:40:cf:bd:1b:78:
d9:27:e9:61:af:bd:89:8a:32:5e:71:b4:25:97:be:
24:a7:bc:13:9d:47:ab:23:5b:5b:5b:15:f8:ed:e4:
cd:27:1c:6e:1d:21:18:e7:37:c2:51:a7:be:59:93:
d1:bc:ab:0b:80:2c:41:5c:53:a0:f0:1c:7e:4b:3c:
bf:d1:df:b1:de:28:6f:f5:c3:8a:7f:34:c8:e7:0a:
aa:c3:12:e3:63:13:75:95:4b:dc:69:ff:aa:bc:9c:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AE:E9:13:FF:C7:76:E3:12:A2:0F:0D:E4:31:68:B2:5E:5E:C3:27
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/05E5F3E03D6111F088F2BDEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.103.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e8:7f:1c:20:e4:fc:53:16:b9:48:58:d3:33:fd:da:8d:57:
cb:98:28:20:6e:13:b2:a8:ae:6c:64:0e:ca:40:f2:03:d5:3e:
2d:fe:09:46:ec:ce:3c:31:bf:d8:a4:87:db:43:a4:66:2e:40:
82:20:11:55:fb:85:b4:ec:b4:76:9e:35:1c:7c:2e:97:8c:40:
0c:fa:27:c8:ae:b7:a6:04:9d:55:95:e2:8c:a9:77:65:90:7f:
12:66:66:94:48:c5:0b:34:5b:e0:50:fb:fc:ac:fe:f2:df:41:
ae:0e:be:ec:ce:e2:61:3c:13:e5:f0:3e:9f:8b:4d:dd:28:4a:
14:65:5d:57:1b:4d:c4:04:92:ee:da:67:da:a2:b8:89:d2:a6:
4b:96:fd:2f:03:a7:37:f2:72:83:50:0a:2d:5c:c8:07:ae:f9:
ff:50:0e:6a:49:bf:cd:92:1d:bf:5f:f5:29:57:46:30:2b:1d:
61:23:17:47:92:ee:e3:d7:03:07:9d:97:ae:ab:fd:e5:58:3d:
bd:e6:c4:43:b6:f1:56:66:82:2f:60:66:27:d5:21:15:9a:6b:
49:7f:24:a0:cf:ba:37:97:f4:b3:85:ff:a1:19:bf:a6:e1:4c:
01:d5:f5:b1:f1:f9:85:d2:bd:34:23:a0:40:00:fb:54:3b:e7:
d9:97:e8:6d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCu0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MzAxNDE4NTNaFw0yNjA1MjkxNDE4NTNaMBgxFjAU
BgNVBAMTDTY4MzliZTUxLWFlYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0e7pxvExZ3VNhzww2FCqGax2KA4mHubf/7vAfQElZGu5LlT0HV/B5kaoI
rQOTMPaFhXGyORRdkNakxarEYg/QiIQWGeQkCxKsUMh99FQhwCY9MQBWXf7gikbr
FuAgVMDCa2HFfvLrul5dHrzsyzGK+pieFF3Svp3eVi5xw8sMZbCvuAH2JfufiEDS
AWcd6+qw5qKf4seNXa9CO6SjBs9Az70beNkn6WGvvYmKMl5xtCWXviSnvBOdR6sj
W1tbFfjt5M0nHG4dIRjnN8JRp75Zk9G8qwuALEFcU6DwHH5LPL/R37HeKG/1w4p/
NMjnCqrDEuNjE3WVS9xp/6q8nEFPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1K7p
E//HduMSog8N5DFosl5ewycwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzA1RTVGM0UwM0Q2MTExRjA4OEYyQkRFRERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+2cwDQYJKoZIhvcNAQEL
BQADggEBAGDofxwg5PxTFrlIWNMz/dqNV8uYKCBuE7KormxkDspA8gPVPi3+CUbs
zjwxv9ikh9tDpGYuQIIgEVX7hbTstHaeNRx8LpeMQAz6J8iut6YEnVWV4oypd2WQ
fxJmZpRIxQs0W+BQ+/ys/vLfQa4OvuzO4mE8E+XwPp+LTd0oShRlXVcbTcQEku7a
Z9qiuInSpkuW/S8DpzfycoNQCi1cyAeu+f9QDmpJv82SHb9f9SlXRjArHWEjF0eS
7uPXAwedl66r/eVYPb3mxEO28VZmgi9gZifVIRWaa0l/JKDPujeX9LOF/6EZv6bh
TAHV9bHx+YXSvTQjoEAA+1Q759mX6G0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:42 2025 by rpki-client